SecretWolf
Stop clients emailing you their passports and passwords
Send a secure, branded request link. Clients send ID documents, bank details and logins straight to you — nothing left sitting in an inbox. Every request is logged, so you can show exactly how client data was handled.
Client data ends up in the worst place
A new client emails a scan of their passport for your identity checks. Another replies to your engagement letter with their online banking login, and a third pastes a payroll password into a thread three people are copied into.
Each one now lives in inboxes, sent items, backups and forwarded threads — indefinitely, and out of your control. "Just email it over" is the habit that puts it there.
How a secure request works
Three steps, and no account for your client.
-
Send a request
Use the Login credentials template or describe what you need, and send your client a branded link.
-
Your client fills it in
They open a page carrying your practice's logo and colours, enter the details and press send. Nothing to install, no account to create.
-
You open it once
You're emailed when it arrives. Opening it deletes it, and the request, the submission and the view are all logged.
Why it matters
Taking on a client means handling their identity and financial details as part of anti-money-laundering client due diligence, and UK GDPR expects personal data to be kept with appropriate security. Email gives you neither a secure route nor a record.
SecretWolf doesn't make a practice compliant on its own. It gives you a cleaner process for moving client data, and a record of it: what was requested, when it arrived and when it was opened — metadata only, never the content.
Why not a free link tool?
Free one-time link tools are good for sending the odd password, and some now let clients send information to you as well. What a practice usually also needs is a record of what was requested, sent and opened, its own branding on what clients see, and a team working in one place. SecretWolf includes all three from the Team plan at £12/month.
SecretWolf vs Onetime Secret · Is it safe to email passwords?
Where practices use it
-
New client onboarding
Collect the logins and account details you need in the first week through one branded request.
-
Collecting ID documents
Clients upload a passport or proof of address to a branded link — a phone photo is fine — instead of emailing it.
-
Bank details for payments and refunds
Get the account details for a refund or a payment run without them sitting in an email thread.
-
Payroll and bookkeeping software logins
Collect a client's payroll or bookkeeping login when you take the work on.
-
Sending credentials to clients
Send a login back to a client as a link that opens once and is then deleted.
-
Staff joining or leaving
Requests and the audit trail belong to the practice's workspace, not one person's inbox, so the record stays when someone leaves.
Features that matter to practices
What a practice gets, and the plan each feature starts on.
Branded request links
TeamAsk a client for a login or bank details through a form carrying your logo and colours. The Login credentials template gives them labelled fields rather than a blank box.
ID documents and files
BusinessClients attach a passport, proof of address or a statement to the request — up to five files, a phone photo included. Each is scanned for malware and encrypted.
A standing request portal
BusinessOne permanent page on your branded address — ideal for an onboarding pack — where any client can send you information securely.
An audit trail
TeamEvery request, submission, send and view is logged with timestamps. Export to CSV and set your own retention on Business.
Recipient verification
BusinessRequire an emailed one-time code before a secret you send reveals, so a login only opens for the client you sent it to.
One workspace for the practice
TeamUp to 5 people on Team and 15 on Business share one brand and one record, and the emails your clients receive carry your practice's name and logo.
Questions we hear
Do my clients need an account?
No. A client opens your request link in a browser, fills it in and sends it. Opening a secret you send them needs no account either.
Can clients send ID documents and photos?
Yes, on the Business plan. A client can attach up to five files to a request — PDFs, scans or a photo straight from their phone (JPG, PNG, HEIC or WEBP), up to 10 MB each. They're deleted once you open them, so save anything you must retain for client due diligence into your own records.
Where is client data stored, and for how long?
Submissions are encrypted with AES-256-GCM and kept only until they're opened: opening one deletes it, and anything never opened is deleted after seven days. The audit log keeps metadata — who, what and when, never the content — for 365 days by default.
Can we use our own branding?
Yes, from the Team plan. Request pages, secret pages and the emails your clients receive carry your practice's logo, colours and name — on your own SecretWolf subdomain, or on Business your own domain, such as secrets.yourpractice.co.uk.
Is there a record of what was sent and opened?
Yes, on Team and Business. The audit log records each request, submission, send, view and expiry with timestamps — metadata only, never the content. Business adds CSV export and retention settings.
How is this different from emailing a password-protected PDF?
A protected PDF stays in the inbox, sent items and backups for good, and its password usually follows in the next email to the same inbox. A SecretWolf link opens once, the content is then deleted, and you have a record that it was opened.
Is there a free plan?
Yes. The free plan lets one person send up to three one-time secrets at a time. Requests, branding and the audit trail start on Team at £12/month, excluding VAT.
Explore more ways to use SecretWolf
The same secure collection and record, framed for the other moments a practice moves client data.
Or see them all: Who it's for.
Collect your next client's details the safe way
Start free with one-time secrets. Requests, branding and the audit trail start on Team at £12/month, excluding VAT.
Start free